Commit Graph

16 Commits

Author SHA1 Message Date
jamesread ebffd9f040 security: GHSA-prj9-97mp-mwh2 (HIGH) Treat all ot_ system arguments as reserved, preventing RCE
Ensure OliveTin-owned arguments are injected only after filtering and validate system values before command execution.
2026-05-31 22:44:40 +01:00
jamesread 246e33d565 feat: API Key (bearer) auth 2026-05-21 22:59:12 +01:00
jamesread fe68264c2b feat: popupOnStart history, and logs in reverse order on action details view 2026-05-19 23:19:42 +01:00
jamesread b33aded230 chore: Use a constant for the default CSP 2026-03-09 10:00:47 +00:00
jamesread 3f46007281 fix: Relax default CSP to allow iconify to work 2026-03-08 20:46:52 +00:00
jamesread d9804182ea security: GHSA-4fqm-6fmh-82mq Authentication bypass in KillAction - thanks for the responsible disclosure @kule500 and making OliveTin better 2026-03-02 00:29:02 +00:00
jamesread 4744169aa0 chore: code cleanup, remove todos, etc 2026-02-26 23:07:07 +00:00
jamesread cb71ddf401 fix: Set common security headers by default 2026-02-26 16:14:41 +00:00
jamesread 011ee866df feat: template parsing for env in password fields 2026-02-13 23:53:43 +00:00
jamesread b37f035ea6 fix: Move templating functionality to global, making it possible to replace templates across the config 2026-01-25 10:32:22 +00:00
jamesread a2410fc9d6 feat: Entity directories, inline actions, and all entity fields are now available in the entity details view 2025-12-01 21:48:27 +00:00
jamesread 32fea4ec30 feat: Dashboard configs can now self-contain their entities, and actions all in one neat file 2025-12-01 16:15:08 +00:00
jamesread e58677e12c feat: inline actions on dashboards 2025-12-01 12:29:41 +00:00
jamesread b3e67bad75 doc: Add config tool to help support people 2025-11-16 23:08:20 +00:00
James Read 709d6ac2ad
feature: Allow rendering output as HTML (#544) 2025-03-28 23:48:26 +00:00
James Read ff31abe66c
refactor: Project directories (#541) 2025-03-22 01:06:59 +00:00